PT-2019-14752 · Netgate · Pfsense

Publicado 2019-09-26 · Atualizado 2020-07-27 · CVE-2019-16667

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pfSense version 2.4.4-p3

Description The issue allows for CSRF, potentially enabling the execution of OS commands. This is demonstrated through the txtCommand or txtRecallBuffer field in the diag command.php file. The csrf callback() function is involved, producing a "CSRF token expired" error along with a Try Again button when a CSRF token is missing.

Recommendations For pfSense version 2.4.4-p3, consider restricting access to the diag command.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the txtCommand or txtRecallBuffer fields in the diag command.php file until a patch is available.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-16667

Produtos afetados

Pfsense

Referências · 5

• 🔥 https://exploit-db.com/exploits/48714 · Exploit
• 🔥 https://pastebin.com/TEJdu9LN · Exploit
• https://osv.dev/vulnerability/CVE-2019-16667 · Aviso do Fabricante
• http://packetstormsecurity.com/files/158614/pfSense-2.4.4-p3-Cross-Site-Request-Forgery.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-16667 · Nota de Segurança